$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer File: 4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer (raw, json) Hash identifier: 1edhcmVVbzdE2CrbPO85gIPAX1RaVGs4gCzzdjLaBYo= Subject key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285848387DC2845EFACFF2F15A8E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Dec 2024 01:45:32 +0000 Certificate not after: Sun 21 Mar 2027 00:45:32 +0000 Subordinate resources: IP: 69.24.141.0/24 IP: 209.127.233.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:7d:c2:84:5e:fa:cf:f2:f1:5a:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Dec 16 01:45:32 2024 GMT Not After : Mar 21 00:45:32 2027 GMT Subject: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:87:bc:6d:ca:c0:64:46:ce:0c:19:41:62:41: 88:15:5b:a3:59:ef:a8:07:6d:47:5c:1e:6a:8e:da: d6:4a:be:ed:57:99:e4:d8:ae:2a:00:de:1f:7d:57: 75:90:c2:ae:a2:41:94:ab:f5:f9:a3:b0:ce:34:ad: a4:59:98:60:23:1d:01:0e:73:45:c0:60:29:33:ee: ee:51:42:e9:6e:6f:3a:25:70:50:e8:23:23:1d:50: ef:8c:d2:d4:b4:70:61:1a:8b:23:f9:0d:b8:50:dc: f3:88:7c:0d:c6:19:56:d0:0d:df:1a:ed:1f:b7:d6: 7b:e0:6c:e9:29:8a:06:e3:b7:ad:fc:50:1f:0b:df: 37:c3:4d:7e:fb:a7:c5:59:90:33:bc:8c:2c:6c:43: 74:25:27:d1:36:b7:cb:06:94:71:5b:fa:45:45:87: 77:14:d8:a3:89:fa:a9:42:10:b6:ab:bc:20:89:12: a8:45:a5:fe:29:df:31:4f:d2:b1:7e:6d:9e:5a:e3: 3e:55:9f:06:24:32:f4:61:60:17:7f:cf:39:8c:40: 54:ad:81:c3:29:c2:12:30:59:82:40:72:bf:15:2e: 0f:63:23:94:b2:76:a5:fe:76:a5:d4:bf:e2:df:2d: f7:d8:05:76:69:51:f4:3a:eb:81:07:4e:f9:61:d7: 2d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 69.24.141.0/24 209.127.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:68:84:2d:c2:f3:6c:7d:29:03:ac:33:72:92:62:8a:34:a0: db:69:2a:98:a8:27:2d:f3:26:7d:23:29:cb:5c:90:94:8d:ca: 47:b3:d2:b7:ef:5f:7e:b4:3d:2b:fb:b8:bb:aa:17:1e:2a:07: 8f:cd:cb:3e:ea:0f:0c:ed:2e:62:4e:98:78:9f:a9:8f:5e:ae: 3e:b9:6d:05:ad:fa:d3:46:0a:39:7a:30:1f:17:a0:fe:4b:93: f6:51:65:aa:52:61:93:b9:3e:e4:48:29:d7:4c:0d:6e:93:ef: 40:bd:70:df:f3:03:2b:a2:b9:cd:a5:fa:c9:36:fc:be:df:d4: f1:e2:3a:76:08:f5:1e:14:f4:73:be:1a:99:d5:71:8a:04:a0: c7:80:82:b9:6c:14:33:39:7e:3e:30:b2:62:d1:8d:8c:b7:50: 8c:c7:5a:06:fd:e8:e5:ef:01:aa:5b:e3:60:1b:ff:2b:3e:d9: a9:e3:8d:98:aa:4d:29:2a:cd:3c:da:fc:ef:88:0e:08:34:99: 38:30:13:0a:7a:46:02:60:c6:0a:5b:f4:f8:f9:eb:f8:85:20: c7:dc:f9:be:2b:0b:c5:5c:71:e1:02:42:c0:0c:66:a3:b6:76: 64:bb:ed:a9:a6:be:3b:ed:da:33:ad:44:bd:af:ac:aa:69:c9: 65:f4:9d:af -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEg4fcKEXvrP8vFajoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MTIxNjAxNDUzMloXDTI3MDMyMTAwNDUzMlowLzEtMCsGA1UEAxMk NGY4ZWMyNWQtOTMyYS00ZGQ0LThmODMtZjFkYTA0OTA2OGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIe8bcrAZEbODBlBYkGIFVujWe+oB21HXB5q jtrWSr7tV5nk2K4qAN4ffVd1kMKuokGUq/X5o7DONK2kWZhgIx0BDnNFwGApM+7u UULpbm86JXBQ6CMjHVDvjNLUtHBhGosj+Q24UNzziHwNxhlW0A3fGu0ft9Z74Gzp KYoG47et/FAfC983w01++6fFWZAzvIwsbEN0JSfRNrfLBpRxW/pFRYd3FNijifqp QhC2q7wgiRKoRaX+Kd8xT9Kxfm2eWuM+VZ8GJDL0YWAXf885jEBUrYHDKcISMFmC QHK/FS4PYyOUsnal/nal1L/i3y332AV2aVH0OuuBB075YdctQwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFDHF4J2nQhfvJ0d+jqUpjT8z8uVNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5MDY4ZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzRmOGVjMjVkLTkzMmEtNGRkNC04 ZjgzLWYxZGEwNDkwNjhlYy80ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5 MDY4ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABFGI0DBADRf+kwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI2iELcLzbH0p A6wzcpJiijSg22kqmKgnLfMmfSMpy1yQlI3KR7PSt+9ffrQ9K/u4u6oXHioHj83L PuoPDO0uYk6YeJ+pj16uPrltBa3600YKOXowHxeg/kuT9lFlqlJhk7k+5Egp10wN bpPvQL1w3/MDK6K5zaX6yTb8vt/U8eI6dgj1HhT0c74amdVxigSgx4CCuWwUMzl+ PjCyYtGNjLdQjMdaBv3o5e8BqlvjYBv/Kz7ZqeONmKpNKSrNPNr874gOCDSZODAT CnpGAmDGClv0+Pnr+IUgx9z5visLxVxx4QJCwAxmo7Z2ZLvtqaa+O+3aM61Eva+s qmnJZfSdrw== -----END CERTIFICATE-----Generated at Tue Feb 11 23:57:05 2025 by rpki-client